CODESYS: Multiple products prone to stack based out-of-bounds write

CVE-2022-47386

What is CVE-2022-47386?

An authenticated remote attacker could exploit a stack-based out-of-bounds write vulnerability in the CmpTraceMgr Component, found in multiple versions of CODESYS products. This security flaw permits the attacker to write unauthorized data into the stack, which may result in memory overwriting, denial-of-service conditions, or even the execution of arbitrary code remotely. Organizations using CODESYS products should take immediate action to mitigate potential threats by applying available patches and implementing robust security measures.

References